# CVEs published 2006-06-13

47 CVEs were published on June 13, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-3009](https://cve.now/CVE-2006-3009.md): Multiple cross-site scripting (XSS) vulnerabilities in Open Business Management (OBM) 1.0.3 pl1 allow remote attackers to inject arbitrary H (no CVSS)
- [CVE-2006-3010](https://cve.now/CVE-2006-3010.md): Multiple SQL injection vulnerabilities in Open Business Management (OBM) 1.0.3 pl1 allow remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2006-0022](https://cve.now/CVE-2006-0022.md): Unspecified vulnerability in Microsoft PowerPoint in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP1 and SP2, Office 2004 for Mac, (no CVSS)
- [CVE-2006-0025](https://cve.now/CVE-2006-0025.md): Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image wit (no CVSS)
- [CVE-2006-1193](https://cve.now/CVE-2006-1193.md): Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows us (no CVSS)
- [CVE-2006-1303](https://cve.now/CVE-2006-1303.md): Multiple unspecified vulnerabilities in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allow remote attackers to execute arbitra (no CVSS)
- [CVE-2006-1313](https://cve.now/CVE-2006-1313.md): Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release object (no CVSS)
- [CVE-2006-2370](https://cve.now/CVE-2006-2370.md): Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earli (no CVSS)
- [CVE-2006-2371](https://cve.now/CVE-2006-2371.md): Buffer overflow in the Remote Access Connection Manager service (RASMAN) service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2 (no CVSS)
- [CVE-2006-2373](https://cve.now/CVE-2006-2373.md): The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows loc (no CVSS)
- [CVE-2006-2374](https://cve.now/CVE-2006-2374.md): The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows loc (no CVSS)
- [CVE-2006-2378](https://cve.now/CVE-2006-2378.md): Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Win (no CVSS)
- [CVE-2006-2379](https://cve.now/CVE-2006-2379.md): Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote a (no CVSS)
- [CVE-2006-2380](https://cve.now/CVE-2006-2380.md): Microsoft Windows 2000 SP4 does not properly validate an RPC server during mutual authentication over SSL, which allows remote attackers to (no CVSS)
- [CVE-2006-2382](https://cve.now/CVE-2006-2382.md): Heap-based buffer overflow in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code v (no CVSS)
- [CVE-2006-2383](https://cve.now/CVE-2006-2383.md): Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code vi (no CVSS)
- [CVE-2006-2384](https://cve.now/CVE-2006-2384.md): Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to conduct spoofing and phishing attacks by using a modal (no CVSS)
- [CVE-2006-2385](https://cve.now/CVE-2006-2385.md): Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows user-assisted remote attackers to execute arb (no CVSS)
- [CVE-2006-2376](https://cve.now/CVE-2006-2376.md): Integer overflow in the PolyPolygon function in Graphics Rendering Engine on Microsoft Windows 98 and Me allows remote attackers to execute (no CVSS)
- [CVE-2006-2660](https://cve.now/CVE-2006-2660.md): Buffer consumption vulnerability in the tempnam function in PHP 5.1.4 and 4.x before 4.4.3 allows local users to bypass restrictions and cre (no CVSS)
- [CVE-2006-3005](https://cve.now/CVE-2006-3005.md): The JPEG library in media-libs/jpeg before 6b-r7 on Gentoo Linux is built without the -maxmem feature, which could allow context-dependent a (no CVSS)
- [CVE-2006-3006](https://cve.now/CVE-2006-3006.md): Cross-site scripting (XSS) vulnerability in iFoto 0.20, and possibly other versions before 0.50, allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2006-3007](https://cve.now/CVE-2006-3007.md): Multiple cross-site scripting (XSS) vulnerabilities in SHOUTcast 1.9.5 allow remote attackers to inject arbitrary HTML or web script via the (no CVSS)
- [CVE-2006-2908](https://cve.now/CVE-2006-2908.md): The domecode function in inc/functions\_post.php in MyBulletinBoard (MyBB) 1.1.2, and possibly other versions, allows remote attackers to exe (no CVSS)
- [CVE-2006-2982](https://cve.now/CVE-2006-2982.md): Multiple PHP remote file inclusion vulnerabilities in Enterprise Timesheet and Payroll Systems (EPS) 1.1 and earlier allow remote attackers (no CVSS)
- [CVE-2006-2983](https://cve.now/CVE-2006-2983.md): PHP remote file inclusion vulnerability in Enterprise Timesheet and Payroll Systems (EPS) 1.1 and earlier allows remote attackers to execute (no CVSS)
- [CVE-2006-2984](https://cve.now/CVE-2006-2984.md): Cross-site scripting (XSS) vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-2985](https://cve.now/CVE-2006-2985.md): SQL injection vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via doubl (no CVSS)
- [CVE-2006-2986](https://cve.now/CVE-2006-2986.md): Multiple cross-site scripting (XSS) vulnerabilities in Baby Katie Media (a) very Simple Car Lister (vSCAL) 1.0 and (b) very simple Realty Li (no CVSS)
- [CVE-2006-2987](https://cve.now/CVE-2006-2987.md): Multiple SQL injection vulnerabilities in Dominios Europa PICRATE (aka TAL RateMyPic) 1.0 allow remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2006-2988](https://cve.now/CVE-2006-2988.md): Cross-site scripting (XSS) vulnerability in dictionary.php in Chemical Dictionary allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-2989](https://cve.now/CVE-2006-2989.md): Cross-site scripting (XSS) vulnerability in listpics.asp in ASP ListPics 4.3 and earlier allows remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2006-2990](https://cve.now/CVE-2006-2990.md): Cross-site scripting (XSS) vulnerability in default.asp in VanillaSoft Helpdesk 2005 and earlier allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2006-2991](https://cve.now/CVE-2006-2991.md): Multiple cross-site scripting (XSS) vulnerabilities in Ringlink 3.2 allow remote attackers to inject arbitrary web script or HTML via a Java (no CVSS)
- [CVE-2006-2992](https://cve.now/CVE-2006-2992.md): Cross-site scripting (XSS) vulnerability in display.asp in My Photo Scrapbook 1.0 and earlier allows remote attackers to inject arbitrary we (no CVSS)
- [CVE-2006-2993](https://cve.now/CVE-2006-2993.md): Multiple SQL injection vulnerabilities in My Photo Scrapbook 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2006-2994](https://cve.now/CVE-2006-2994.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in phazizGuestbook 2.0 allow remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2006-2995](https://cve.now/CVE-2006-2995.md): Multiple PHP remote file inclusion vulnerabilities in WebprojectDB 0.1.3 and earlier allow remote attackers to execute arbitrary PHP code vi (no CVSS)
- [CVE-2006-2996](https://cve.now/CVE-2006-2996.md): PHP remote file inclusion vulnerability in inc/design.inc.php in LoveCompass aePartner 0.8.3 and earlier allows remote attackers to execute (no CVSS)
- [CVE-2006-2997](https://cve.now/CVE-2006-2997.md): Cross-site scripting (XSS) vulnerability in ZMS 2.9 and earlier, when register\_globals is enabled, allows remote attackers to inject arbitra (no CVSS)
- [CVE-2006-2998](https://cve.now/CVE-2006-2998.md): PHP remote file inclusion vulnerability in board/post.php in free QBoard 1.1 and earlier allows remote attackers to execute arbitrary PHP co (no CVSS)
- [CVE-2006-2999](https://cve.now/CVE-2006-2999.md): Cross-site scripting (XSS) vulnerability in search.php in OkScripts QuickLinks 1.1 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-3000](https://cve.now/CVE-2006-3000.md): Cross-site scripting (XSS) vulnerability in search.php in OkScripts OkArticles 1.0 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-3001](https://cve.now/CVE-2006-3001.md): Cross-site scripting (XSS) vulnerability in search.php in OkScripts OkMall 1.0 allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2006-3002](https://cve.now/CVE-2006-3002.md): Cross-site scripting (XSS) vulnerability in details.php in Easy Ad-Manager allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2006-3003](https://cve.now/CVE-2006-3003.md): details.php in Easy Ad-Manager allows remote attackers to obtain the full installation path via an invalid mbid parameter, which leaks the p (no CVSS)
- [CVE-2006-3004](https://cve.now/CVE-2006-3004.md): Multiple cross-site scripting (XSS) vulnerabilities in Ez Ringtone Manager allow remote attackers to inject arbitrary web script or HTML via (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-06-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.